Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/BNWsymjkxtUtBQTCvut-E3zgoQo.roa
File: BNWsymjkxtUtBQTCvut-E3zgoQo.roa (raw, json)
Hash identifier: dXiYf81LOUZ2u8Rt80Jayayf4WxBqR5A+AcN5+nghoQ=
Subject key identifier: 04:D5:AC:CA:68:E4:C6:D5:2D:05:04:C2:BE:EB:7E:13:7C:E0:A1:0A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 067C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/BNWsymjkxtUtBQTCvut-E3zgoQo.roa
Signing time: Mon 20 Jan 2025 20:24:53 +0000
ROA not before: Mon 20 Jan 2025 20:24:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1660 (0x67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 20 20:24:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=04D5ACCA68E4C6D52D0504C2BEEB7E137CE0A10A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:00:5c:5f:49:46:5f:70:c6:e7:2f:e3:af:
48:f1:d3:33:5e:60:02:bb:9d:6d:12:a7:20:2e:5d:
6a:83:77:79:15:95:bc:3d:7a:7a:f4:7c:41:c6:19:
84:2c:e6:6f:7d:d2:8e:3c:a3:80:9b:f2:d1:32:f3:
46:ab:16:e8:bd:36:3f:12:68:09:c6:0f:21:80:10:
0b:76:30:96:c4:f5:5b:89:f4:65:a5:36:9e:bc:f8:
e5:2b:a2:74:48:6a:ed:d4:46:71:49:3b:26:57:cf:
64:61:63:10:24:c6:5d:b8:b5:5e:03:8c:86:fe:a4:
9b:21:8c:7e:87:ce:a1:95:31:e3:e9:78:6b:2d:98:
6e:1e:7c:50:68:1f:a4:12:ba:62:cb:dd:0e:87:61:
ea:1f:fd:64:3a:41:54:9f:96:fe:e5:20:88:60:6a:
4d:d9:98:63:82:10:5e:be:ce:00:3c:62:09:4b:b7:
06:07:24:70:f4:06:6b:e8:27:29:33:2a:0e:c9:c3:
2b:11:54:8b:a1:7e:be:91:d2:bd:6a:88:4f:2b:cf:
f1:c3:2b:0c:77:51:46:6b:dc:7b:4b:4f:a9:35:fe:
d9:52:e2:43:92:2a:82:6e:be:00:61:98:da:f1:af:
a0:44:fe:68:7a:72:59:97:6c:b5:c7:98:0b:9c:94:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D5:AC:CA:68:E4:C6:D5:2D:05:04:C2:BE:EB:7E:13:7C:E0:A1:0A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/BNWsymjkxtUtBQTCvut-E3zgoQo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
78:18:a0:47:e6:3a:04:c9:29:e0:5b:41:9c:f9:f0:61:b7:c1:
9d:cf:e5:80:84:77:0c:56:c8:0f:bf:58:63:08:f9:85:00:19:
e6:34:66:4b:d9:e5:50:d0:10:7e:23:5e:b0:dd:21:14:0d:c2:
f1:a0:c2:46:3c:df:54:a7:2c:8d:15:77:54:76:9b:4c:b9:57:
0e:95:33:8e:fa:79:e8:3f:25:9b:e9:1a:30:e9:a2:9a:a4:40:
ef:1c:90:bf:31:a3:22:cf:04:4d:83:93:5d:f8:76:9b:af:75:
06:1e:5f:2f:be:72:05:40:63:37:71:63:1b:0d:03:24:3b:49:
9e:ac:68:47:8e:35:ac:41:90:47:33:cb:92:4d:b5:94:31:c4:
a5:63:ec:f3:5d:8f:b6:57:fd:0e:ef:91:76:ca:fd:aa:a2:7f:
f0:d4:c0:94:3c:5d:38:a7:d8:91:07:8f:f8:5e:b5:37:f4:17:
10:e0:0a:6f:1c:46:f9:a4:3c:be:7d:27:48:34:8f:7c:19:c8:
de:2e:c1:15:e1:b3:fc:42:55:9d:0b:75:0d:38:1e:64:e2:4b:
55:43:24:0a:bd:7a:c3:bf:e0:f0:51:3e:ae:6f:fe:4c:31:82:
2b:3e:d1:4d:4d:38:e3:c5:8e:0d:d4:2c:98:4f:3c:63:d9:7d:
30:2a:37:70
-----BEGIN CERTIFICATE-----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=
Generated at Tue Jan 21 00:23:48 2025 by rpki-client on console.sobornost.net